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~ The MAILING DATE of this communication appears on the cover sheet with the correspondence address- 
All claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
herewith (or previously mailed), a Notice of Allowance (PTOL-85) or other appropriate communication will be mailed in due course. THIS 
NOTICE OF ALLOWABILITY IS NOT A GRANT OF PATENT RIGHTS. This application is subject to withdrawal from issue at the initiative 
of the Office or upon petition by the applicant. See 37 CFR 1.313 and MPEP 1 308. 

1 . This communication is responsive to 5/13/08 . 

2. ^ The allowed claim(s) is/are 21.23-28.30-33.35 and 37-41 . 

3. □ Acknowledgment is madeof a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 

a) □ All b) □ Some* c) □ None of the: 

1 . □ Certified copies of the priority documents have been received. 

2. □ Certified copies of the priority documents have been received in Application No. . 

3. □ Copies of the certified copies of the priority documents have been received in this national stage application from the 

International Bureau (PCT Rule 17.2(a)). 
* Certified copies not received: . 

Applicant has THREE MONTHS FROM THE "MAILING DATE" of this communication to file a reply complying with the requirements 
noted below. Failure to timely comply will result in ABANDONMENT of this application. 
THIS THREE-MONTH PERIOD IS NOT EXTENDABLE. 

4. □ A SUBSTITUTE OATH OR DECLARATION must be submitted. Note the attached EXAMINER'S AMENDMENT or NOTICE OF 

INFORMAL PATENT APPLICATION (PTO-152) which gives reason(s) why the oath or declaration is deficient. 

5. □ CORRECTED DRAWINGS ( as "replacement sheets") must be submitted. 

(a) □ including changes required by the Notice of Draftsperson's Patent Drawing Review ( PTO-948) attached 

1 ) □ hereto or 2) □ to Paper No./Mail Date . 

(b) □ including changes required by the attached Examiner's Amendment / Comment or in the Office action of 

Paper No./Mail Date . 

Identifying indicia such as the application number (see 37 CFR 1.84(c)) should be written on the drawings In the front (not the back) of 
each sheet. Replacement sheet(s) should be labeled as such in the header according to 37 CFR 1.121(d). 

6. □ DEPOSIT OF and/or INFORMATION about the deposit of BIOLOGICAL MATERIAL must be submitted. Note the 

attached Examiner's comment regarding REQUIREMENT FOR THE DEPOSIT OF BIOLOGICAL MATERIAL. 
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DETAILED ACTION 

This Action is responsive to RCE and amendment filed on May 13, 2008. 
Claims 1-20 and 34 are cancelled and new claim 41 is added, hence, claims 21-33 and 35-41 are 
now pending. 

Continued Examination Under 37 CFR 1.114 

A request for continued examination under 37 CFR 1.1 14, including the fee set forth in 
37 CFR 1 .17(e), was filed in this application after final rejection. Since this application is 
eligible for continued examination under 37 CFR 1.1 14, and the fee set forth in 37 CFR 1.17(e) 
has been timely paid, the finality of the previous Office action has been withdrawn pursuant to 
37 CFR 1.1 14. Applicant's submission filed on 5/13/08 has been entered. 

EXAMINER'S AMENDMENT 

An examiner's amendment to the record appears below. Should the changes and/or 
additions be unacceptable to applicant, an amendment may be filed as provided by 37 CFR 
1.312. To ensure consideration of such an amendment, it MUST be submitted no later than the 
payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview with 
Anthony Bonner Jr. on June 13, 2008. 



AMENDMENT TO CLAIMS 

2 1 . (Currently Amended) A computer-readable medium comprising: having stored in 
memory computer executable instructions that when executed bv a computer are configured to 
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perform the following: 

computor - roadablo codo adapted to instruct a programmable dovico to search for a 
first piece of sensitive information, the first piece of sensitive information including personal 
information regarding at least one user; 

computor - roadablo code adapted to instruct a programmable dcvico to search for a 
second piece of sensitive information, the second piece of sensitive information including 
personal information regarding the at least one user; 

computor - roadablo codo adapted to instruct a progranmiablo dovico to obtain a 
result of the search for the first piece of sensitive information, the first piece of sensitive 
information being of a first type; 

computor - roadablo codo adapted to instruct a programmable dovico to obtain a 
result of the search for the second piece of sensitive information, the second piece of sensitive 
information being of a second type, the first type of information being different than the second 
type of information; 

comput e r r e adabl e cod e adapt e d to instruct a programmabl e d e vic e to assign a 
first score, the first score being determined fi-om the number of occurrences of the first piece of 
sensitive data, as revealed in the search for the first piece of sensitive data; 

computer readable code adapted to instruct a programmable device to assign a 
second score, the second score being determined from the number of occurrences of the &st 
second piece of sensitive data, as revealed in the search for the first second piece of sensitive 
data; 

comput e r r e adabl e cod e adapt e d to instruct a programmabl e d e vic e to combine 
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the first score and the second score; 




provide the 



combined score to a user; and 



computor - roadablo code adapted to instruct a programmable device to 



automatically determine, from the combined score, score and a combination of sensitive 
information types searched, a risk for at least one identity-related vulnerability, vulnerability. 

wherein sensitive information includes at least one of the following: a name, an address, a 
social security number, a telephone number, and an email address. 

22. (Canceled) 

26. (Currently Amended) The computer-readable medium of claim 2 1 , wherein the 
computer - readable code adapted to instruct a programmable device to search for the first piece of 
sensitive information is configiir e d to includes a search of one or more web pages. 

27. (Currently Amended) The computer-readable medium of claim 2 1 , wherein the 

computer readable code adapted to instruct a programmable device to search for the second 
piece of sensitive information is configur e d to includes a search of one or more web pages. 



28. (Currently Amended) A computer method comprising: 

searching for a first piece of sensitive information, the first piece of sensitive information 
including personal information regarding at least one user; 
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searching for a second piece of sensitive information, the second piece of sensitive 
information including personal information regarding the at least one user; 

obtaining a result of the search for the first piece of sensitive information, the first piece 
of sensitive information being of a first type; 

obtaining a result of the search for the second piece of sensitive information, the second 
piece of sensitive information being of a second type, the first type of information being different 
than the second type of information; 

assigning a first score, the first score being determined from the number of occurrences 
of the first piece of sensitive data, as revealed in the search for the first piece of sensitive data; 

assigning a second score, the second score being determined from the number of 
occurrences of the second piece of sensitive data, as revealed in the search for the second piece 
of sensitive data; 

combining, by an electronic device, the first score and the second score; 
providing, by the electronic device, the combined score to a user; and 
automatically determining, from the combined scor e , score and a combination of 

sensitive information types searched, a risk for at least one identity-related vuln e rability. 

vulnerability, 

wherein sensitive information includes at least one of the following: a name, an address, a 
social security number, a telephone number, and an email address. 

29. (Canceled) 
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35 . (Currently Amended) A system comprising: 

a processor; and 

a memory that stores: 

a first searching component configured to search for a first piece of sensitive 
information, the first piece of sensitive information including personal information regarding at 
least one user; 

a second searching component configured to search for a second piece of sensitive 
information, the second piece of sensitive information including personal information regarding 
the at least one user; 

a first obtaining component configured to obtain a result of the search for the first 
piece of sensitive information, the first piece of sensitive information being of a first type; 

a second obtaining component configured to obtain a result of the search for the 
second piece of sensitive information, the second piece of sensitive information being of a 
second type, the first type of information being different than the second type of information; 

a first assigning component configured to assign a first score, the first score being 
determined from the number of occurrences of the first piece of sensitive data, as revealed in the 
search for the first piece of sensitive data; 

a second assigning component configured to assign a score, the second score 
being determined from the number of occurrences of the second piece of sensitive data, as 
revealed in the search for the second piece of sensitive data; 

a combining component configured to combine the first score and the second 

score; 



Application/Control Number: 1 0/820,4 1 1 Page 7 

Art Unit: 2163 

a providing component configured to provide the combined score to a user; and 
a determining component configured to automatically determine, from the 

combined score, score and a combination of sensitive information types searched, a risk for at 

least one identity-related vulnerability, vulnerability. 

wherein sensitive information includes at least one of the following: a name, an address, a 

social security number, a telephone number, and an email address. 

36. (Canceled) 

Allowable Subject Matter 
Claims 21, 23-28, 30-33, 35 and 37-41 are allowable over the prior art of record 
renumbered as claims 1-17, respectively. 

The following is an Examiner's statement of reasons for allowance: 
Claims 21, 28 and 35 are allowable because the prior art of record or that encountered in 
searching for the invention, fails to disclose or suggest assigning scores based on a number of 
occurrences of sensitive data as revealed in a search, and automatically determine fi-om a 
combined score and a combination of sensitive information types searched, a risk for at least one 
identity-related vulnerability, wherein sensitive information includes at least one of the 
following: a name, an address, a social security number, a telephone number, and an email 
address, as claimed in addition to the other claim provisions. 

Regarding claims 23-27, 30-33 and 37-41 depend fi-om allowable claims 21, 28 and 35, 
respectively, and are therefore allowable on the same basis. 
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Any comments considered necessary by applicant must be submitted no later than the 
payment of the issue fee and, to avoid processing delays, should preferably accompany the issue 
fee. Such submissions should be clearly labeled "Comments on Statement of Reasons for 

Allowance." 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Marc R. Filipczyk whose telephone number is (571) 272-4019. 
The examiner can normally be reached on Mon-Fri, 8:30am-5pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Don Wong can be reached on 571-272-1834. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an apphcation may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Elecfronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

MF 

June 16, 2008 
/Marc R Filipczyk/ 
Examiner, Art Unit 2163 
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/don wong/ 

Supervisory Patent Examiner, Art Unit 2163 



